Threats & CVE Intelligence
Search the locally synchronized CISA known-exploited vulnerabilities catalog, or enter a CVE ID or keyword to search the broader NIST National Vulnerability Database. NVD searches are retrieved on demand and may be rate limited.
Last successful sync: 2026-11-07 18:42:25 UTC · Source catalog updated: 2026-11-06T19:44:45.1797Z · 1769 records in latest import.
CISA Known Exploited Vulnerabilities · 1769 matches
Adobe Flash Player Heap-Based Buffer Overflow Vulnerability
Adobe — Flash Player
Heap-based buffer overflow vulnerability in Adobe Flash Player allows remote attackers to execute code.
CVE-2015-2502 · KEV 2022-04-13Microsoft Internet Explorer Memory Corruption Vulnerability
Microsoft — Internet Explorer
Microsoft Internet Explorer contains a memory corruption vulnerability that allows an attacker to execute code or cause a denial-of-service (DoS).
CVE-2015-0313 · KEV 2022-04-13Adobe Flash Player Use-After-Free Vulnerability
Adobe — Flash Player
Use-after-free vulnerability in Adobe Flash Player allows remote attackers to execute code.
CVE-2015-0311 · KEV 2022-04-13Adobe Flash Player Remote Code Execution Vulnerability
Adobe — Flash Player
Unspecified vulnerability in Adobe Flash Player allows remote attackers to execute code.
CVE-2014-9163 · KEV 2022-04-13Adobe Flash Player Stack-Based Buffer Overflow Vulnerability
Adobe — Flash Player
Stack-based buffer overflow in Adobe Flash Player allows attackers to execute code remotely.
CVE-2022-23176 · KEV 2022-04-11WatchGuard Firebox and XTM Privilege Escalation Vulnerability
WatchGuard — Firebox and XTM
WatchGuard Firebox and XTM appliances allow a remote attacker with unprivileged credentials to access the system with a privileged management session via exposed management access.
CVE-2021-42287 · KEV 2022-04-11Microsoft Active Directory Domain Services Privilege Escalation Vulnerability
Microsoft — Active Directory
Microsoft Active Directory Domain Services contains an unspecified vulnerability that allows for privilege escalation.
Ransomware use reportedCVE-2021-42278 · KEV 2022-04-11Microsoft Active Directory Domain Services Privilege Escalation Vulnerability
Microsoft — Active Directory
Microsoft Active Directory Domain Services contains an unspecified vulnerability that allows for privilege escalation.
Ransomware use reportedCVE-2021-39793 · KEV 2022-04-11Google Pixel Out-of-Bounds Write Vulnerability
Google — Pixel
Google Pixel contains a possible out-of-bounds write due to a logic error in the code that could lead to local escalation of privilege.
CVE-2021-27852 · KEV 2022-04-11Checkbox Survey Deserialization of Untrusted Data Vulnerability
Checkbox — Checkbox Survey
Deserialization of Untrusted Data vulnerability in CheckboxWeb.dll of Checkbox Survey allows an unauthenticated remote attacker to execute arbitrary code.
CVE-2021-22600 · KEV 2022-04-11Linux Kernel Privilege Escalation Vulnerability
Linux — Kernel
Linux Kernel contains a flaw in the packet socket (AF_PACKET) implementation which could lead to incorrectly freeing memory. A local user could exploit this for denial-of-service (DoS) or possibly for privilege escalation.
CVE-2020-2509 · KEV 2022-04-11QNAP Network-Attached Storage (NAS) Command Injection Vulnerability
QNAP — QNAP Network-Attached Storage (NAS)
QNAP NAS devices contain a command injection vulnerability which could allow attackers to perform remote code execution.
CVE-2017-11317 · KEV 2022-04-11Telerik UI for ASP.NET AJAX Unrestricted File Upload Vulnerability
Telerik — User Interface (UI) for ASP.NET AJAX
Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX allows remote attackers to perform arbitrary file uploads or execute arbitrary code.
CVE-2021-3156 · KEV 2022-04-06Sudo Heap-Based Buffer Overflow Vulnerability
Sudo — Sudo
Sudo contains an off-by-one error that can result in a heap-based buffer overflow, which allows for privilege escalation.
CVE-2021-31166 · KEV 2022-04-06Microsoft HTTP Protocol Stack Remote Code Execution Vulnerability
Microsoft — HTTP Protocol Stack
Microsoft HTTP Protocol Stack contains a vulnerability in http.sys that allows for remote code execution.
CVE-2017-0148 · KEV 2022-04-06Microsoft SMBv1 Server Remote Code Execution Vulnerability
Microsoft — SMBv1 server
The SMBv1 server in Microsoft allows remote attackers to execute arbitrary code via crafted packets.
Ransomware use reportedCVE-2022-22965 · KEV 2022-04-04Spring Framework JDK 9+ Remote Code Execution Vulnerability
VMware — Spring Framework
Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding.
CVE-2022-22675 · KEV 2022-04-04Apple macOS Out-of-Bounds Write Vulnerability
Apple — macOS
macOS Monterey contains an out-of-bounds write vulnerability that could allow an application to execute arbitrary code with kernel privileges.
CVE-2022-22674 · KEV 2022-04-04Apple macOS Out-of-Bounds Read Vulnerability
Apple — macOS
macOS Monterey contains an out-of-bounds read vulnerability that could allow an application to read kernel memory.
CVE-2021-45382 · KEV 2022-04-04D-Link Multiple Routers Remote Code Execution Vulnerability
D-Link — Multiple Routers
A remote code execution vulnerability exists in all series H/W revisions routers via the DDNS function in ncc2 binary file.
CVE-2022-26871 · KEV 2022-03-31Trend Micro Apex Central Arbitrary File Upload Vulnerability
Trend Micro — Apex Central
An arbitrary file upload vulnerability in Trend Micro Apex Central could allow for remote code execution.
CVE-2022-1040 · KEV 2022-03-31Sophos Firewall Authentication Bypass Vulnerability
Sophos — Firewall
An authentication bypass vulnerability in User Portal and Webadmin of Sophos Firewall allows for remote code execution.
CVE-2021-34484 · KEV 2022-03-31Microsoft Windows User Profile Service Privilege Escalation Vulnerability
Microsoft — Windows
Microsoft Windows User Profile Service contains an unspecified vulnerability that allows for privilege escalation.
CVE-2021-28799 · KEV 2022-03-31QNAP NAS Improper Authorization Vulnerability
QNAP — Network Attached Storage (NAS)
QNAP NAS running HBS 3 contains an improper authorization vulnerability which can allow remote attackers to log in to a device.
Ransomware use reportedCVE-2021-21551 · KEV 2022-03-31Dell dbutil Driver Insufficient Access Control Vulnerability
Dell — dbutil Driver
Dell dbutil driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial-of-service (DoS), or information disclosure.
CVE-2018-10562 · KEV 2022-03-31Dasan GPON Routers Command Injection Vulnerability
Dasan — Gigabit Passive Optical Network (GPON) Routers
Dasan GPON Routers contain an authentication bypass vulnerability. When combined with CVE-2018-10561, exploitation can allow an attacker to perform remote code execution.
Ransomware use reportedCVE-2018-10561 · KEV 2022-03-31Dasan GPON Routers Authentication Bypass Vulnerability
Dasan — Gigabit Passive Optical Network (GPON) Routers
Dasan GPON Routers contain an authentication bypass vulnerability. When combined with CVE-2018-10562, exploitation can allow an attacker to perform remote code execution.
CVE-2022-1096 · KEV 2022-03-28Google Chromium V8 Type Confusion Vulnerability
Google — Chromium V8
Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, inc…
CVE-2022-0543 · KEV 2022-03-28Debian-specific Redis Server Lua Sandbox Escape Vulnerability
Redis — Debian-specific Redis Servers
Redis is prone to a (Debian-specific) Lua sandbox escape, which could result in remote code execution.
CVE-2021-38646 · KEV 2022-03-28Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability
Microsoft — Office
Microsoft Office Access Connectivity Engine contains an unspecified vulnerability which can allow for remote code execution.
Ransomware use reportedSource: CISA KEV catalog and NIST NVD. “Known” ransomware use is a CISA catalog label, not a real-time incident alert. Always review vendor advisories for patches.